Lead Cloud Engineer (50481)

Western Growers

Irvine (CA)

On-site

USD 140,000 - 180,000

Full time

2 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Western Growers seeks a Lead Cloud Engineer to design, implement, and manage cloud services across Azure and AWS. You will lead migrations, architect hybrid solutions, and enforce IaC, security, and operational excellence.

You will mentor engineers and collaborate with IT leadership to drive digital transformation and vendor integrations while delivering scalable cloud platforms.

Qualifications

5–8 years in infrastructure or cloud engineering with technical lead experience.
Production Azure and/or AWS in real environments (3+ years).
Azure AD/Entra ID, SSO, MFA and identity governance knowledge.
Experience with IaC and security best practices.

Responsibilities

Design, implement, and manage cloud infrastructure across Azure and AWS.
Lead cloud migration initiatives and modernization efforts.
Architect hybrid cloud solutions integrating on‑premises systems.
Implement and maintain IaC using Terraform, ARM, or CloudFormation.
Optimize resources and security, monitor costs and performance.

Skills

Cloud engineering

Azure

AWS

Terraform

CI/CD

PowerShell

Python

Bash

Education

Microsoft Azure Certifications

AWS Certifications

Tools

ARM templates

CloudFormation

Terraform

Docker

Kubernetes

Azure DevOps

GitHub Actions

CloudWatch

Job description

Job Description Summary

The Lead Cloud Engineer is a senior, hands-on technical role responsible for designing, implementing, and managing cloud-based systems across Azure and AWS platforms. This role combines hands-on technical expertise with team leadership, focusing on cloud-native architecture, automation, security, and operational excellence to support Western Growers' digital transformation goals, while providing leadership, mentorship, and guidance to other engineers. The incumbent in this role remains deeply involved in day-to-day engineering work, driving cloud adoption, infrastructure modernization, and security best practices. The role partners closely with IT leadership, application teams, and vendors to ensure cloud solutions align with business and technical requirements.

Job Description Summary

Duties And Responsibilities

Cloud Infrastructure & Architecture

Design, implement, and manage cloud infrastructure across Azure and AWS platforms aligned with business requirements and security standards.
Lead cloud migration initiatives, including workload assessment, migration planning, and execution for applications and data.
Architect hybrid cloud solutions integrating on-premises systems with cloud services.
Implement and maintain infrastructure as code practices using Terraform, ARM templates, or CloudFormation.
Optimize cloud resource utilization and costs through rightsizing, reserved instances, and automation.
Establish and maintain disaster recovery and business continuity capabilities in cloud environments.
Ensure high availability, resiliency, and optimal performance of all cloud-based systems and services.
Maintain backup and recovery procedures for all critical cloud workloads.

Microsoft 365 & Identity Management

Oversee Microsoft 365 tenant administration, including Exchange Online, SharePoint, Teams, and OneDrive.
Manage Azure Active Directory/Entra ID, including user provisioning, group management, and conditional access policies.
Implement and maintain hybrid identity solutions (Azure AD Connect, SSO, MFA).
Establish and enforce identity governance and privileged access management.

Security and Compliance

Implement cloud security best practices including network segmentation, encryption at rest and in transit, and access controls
Collaborate on security strategy, threat response, and risk mitigation.
Design and implement security-first cloud architectures that align with organizational risk tolerance and industry best practices.
Embed security controls into all cloud designs and implementations.
Stay current with emerging cloud technologies, architectures, and industry trends.
Identify and recommend opportunities to leverage cloud capabilities for business process improvement and operational efficiency.

Vendor and Stakeholder Management

Evaluate and recommend cloud services, tools, and technologies to support business objectives.
Work with internal stakeholders to understand requirements and translate them into technical solutions.
Coordinate with software vendors on cloud-based integrations and API connectivity.
Provide regular reporting on cloud operations, costs, and project status to leadership.
Establish, monitor, and report on SLAs for cloud infrastructure and services.
Participate in change management processes related to cloud infrastructure and platform modifications.
Participate in IT strategic planning, roadmap development, and budgeting processes.

Leadership & Mentorship

Provide technical leadership by guiding the planning, design and execution of cloud engineering work across projects.
Mentor and support cloud and systems engineers through hands-on guidance, architecture and code reviews, and collaborative problem solving.
Promote consistent engineering standards, best practices, and reusable patterns across cloud and infrastructure platforms.
Serve as an escalation point for complex technical challenges, assisting teams in resolution while reinforcing sound cloud and security practices.

Other

Utilize all capabilities to satisfy one mission — to enhance the competitiveness and profitability of our members. Do everything possible to help members succeed by being curious and striving to understand what others are trying to achieve, planning, and executing work helpfully and collaboratively. Be willing to adjust efforts to ensure that work and attitude are helpful to others, be self-accountable, create a positive impact, and be diligent in delivering results.
All other duties as assigned.

Physical Demands/Work Environment

The physical demands and work environment described here represent those that an employee must meet to successfully perform this job’s essential functions. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to communicate with others. The employee frequently is required to move around the office. The employee is often required to use tools, objects, and controls. This noise level in the work environment is usually moderate.

Qualifications

Five (5) to eight (8) years of progressive experience in infrastructure, systems engineering, or cloud engineering roles with demonstrated experience serving as a technical lead or senior engineer in cloud-focused initiatives.
Minimum three (3) years of hands-on experience with Microsoft Azure and/or AWS in production environments. Expert level knowledge preferred
Microsoft Certified: Azure Administrator Associate or Azure Solutions Architect Expert (Preferred).
AWS Certified Solutions Architect or AWS Certified SysOps Administrator (Preferred).
Expert-level knowledge of Microsoft Azure services including:

Azure Virtual Machines, Virtual Networks, and hybrid connectivity (VPN/ExpressRoute)
Azure Active Directory, Entra ID, Conditional Access policies
Azure Storage, SQL Database, and data platform services
Azure Monitor, Log Analytics, and Application Insights
Azure DevOps or GitHub Actions for CI/CD pipelines

Strong working knowledge of AWS services including:

EC2, VPC, S3, RDS, Lambda
IAM, Security Groups, and network ACLs
CloudWatch, CloudTrail, and AWS Config
AWS CloudFormation or Terraform for infrastructure as code

Deep technical knowledge of:

Infrastructure as Code (Terraform, ARM templates, CloudFormation)
Container technologies (Docker, Kubernetes, AKS, EKS)
Microsoft 365 administration and hybrid identity (Azure AD Connect, SSO)
PowerShell, Python, or Bash scripting for automation

Networking fundamentals including DNS, VPN, firewall rules, and routing
Security best practices including zero-trust architecture, encryption, and compliance frameworks
Must be available for after-hours maintenance windows, emergencies, and on-call rotation.
Ability to work independently while maintaining collaborative relationships across the organization.
Additional relevant certifications in security, DevOps, or cloud platforms.